Key Transparency

The check runs entirely in your browser: this page downloads the signed log's static files from verify.pollis.com/v1/ and verifies the signature, the inclusion proofs and the commit chain itself, exactly as the pollis-verify group command does. No server computes the verdict. To check the same proof without relying on this page, download the pollis-verify tool (tags pollis-verify-v*, guide here). The only thing you have to trust is the log's pinned public key. It is an ML-DSA-44 (post-quantum) key, so its signatures over past history stay trustworthy even against a future quantum computer. It is published on the artifacts page, in the pollis-verify release body, and compiled into every app build.